04725/2005 16:45 6508517232 



YOUNG LAW FIRM PC 



PAGE 02 



IN THE CLAIMS : 

1. (Currently Amended) A method for a financial services provider to securely 
process corporate payment requests over a computer network, comprising the steps of: 

issuing a primary digital certificate to a primary certificate holder of a corporation, the 
primary certificate being configured to authorize authorizing the primary certificate holder to 
designate a plurality of holders of secondary digital certificates that are derivative from the 
primary certificate, each of the primary and plurality of secondary certificates including at least 
one of unique identifying information and an indication of authority of the holder of the 
certificat e, an authority defined in each of the secondary digital certificates being 
comparatively more limited than an authority defined in the primary digital certificate: 

collectin g, over the computer network, pending corporate payment requests for clearing 
against an account of the corporation; 

periodically generating a pending payment statement that includes the collected pending 
payment requests; 

requiring that each of the collected pending payment requests be validated by an 
authenticated primary or secondary certificate holder having the authority to validate the 
payment requests; 

clearing only validated corporate payment requests of the pending payment statement 
against the corporate account 

2. (Original) The method of Claim 1, wherein the primary certificate includes both 
an identifying information uniquely identifying an officer of the corporation and the authority of 
the officer. 
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3. (Original) The method of Claim 1, wherein the primary certificate includes the 
identifying information uniquely identifying an officer of the corporation and wherein the 
authority of the officer is stored by the financial services provider. 

4. (Original) The method of Claim 3, wherein the requiring step includes steps of: 
receiving the primary certificate from the primary certificate holder or one of the 

secondary certificates from one of the secondary certificate holders; 

authenticating an identity of the certificate holder from which the certificate was 
received, and 

validating the presented certificate. 

5. (Original) The method of Claim 1, wherein the primary digital certificate 
includes the authority of an officer of the corporation and wherein the identifying information 
uniquely identifying the officer is stored by the financial services provider, 

6. (Original) The method of Claim 1, wherein the indication of authority includes at 
least one of: a maximum payment that the holder of the certificate is authorized to validate, an 
expiration date of the certificate, payees for which the certificate holder is authorized to validate 
payments. 

7. (Original) The method of Claim 1, further comprising the step of receiving a list 
of validated corporate payment requests from an authenticated certificate holder of the 
corporation and clearing only those corporate payment requests against the corporate account 
that are listed in the received list of validated corporate payment requests. 
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8. (Original) a e method of data 1, wh^to ft. 8lep a ^ rf 
vaiidaft* ft, aM pcmibg „ ^ of ^ ^ ^ ^ ^ 
partially programmatically. 

9. (Original) The method of Claim 1, wherein the requiring step validates each 
pending payment requests in the pending payment statement by matching the payment request 
with a corresponding payment request in an accounting system of the corporation. 

10. (Origin^ The method of Claim 1, wherein the pending payment statement 
generating step generates the pending payment statement at a regular interval. 

1 1. (Original) The method of Claim 1, wherein the regular interval is one of daily 
and weekly. 

12. (Currently Amended) A computer system configured to enable a financial 
services provider to securely process corporate payment request s over * cnmnnf 
comprising: 

at least one processor; 

at least one data storage device; 

a plurality of processes spawned by said at least one processor, the processes including 
processing logic for: 

issuing a primary certificate to a primary certificate holder of a corporation, the primary 
CertifiCate be *»g configured to ^yire anth^ag the primary certificate holder to 
designate a plurality of holders of secondary digital certificates that are derivative from the 
primary digital certificate, each of the primary and plurality of secondary certificates including at 
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least one of unique identifying infoimation and an indication of authority of the holder of the 
certificate, ™ «n*hnritv define d «" eggh of the secondary dfrital fiertjfieates being 
, nn.ns.rativelv mor e limited than an authority defined in the primary di e tta| certificate ; 

collecting, «r Egnjoutgr network, pending corporate payment requests for clearing 

against an account of the corporation; 

periodically generating a pending payment statement that includes the collected pending 

payment requests; 

requiring that each of the collected pending payment requests be validated by an 
authenticated primary or secondary certificate holder having the authority to validate the 
payment requests; 

clearing only validated corporate payment requests of the pending payment statement 
against the corporate account. 

13. (Original) The system of Claim 12, wherein the primary digital certificate 
includes both an identifying information uniquely identifying an officer of the corporation and 
the authority of the officer. 

14. (Original) The system of Claim 12, wherein the primary digital certificate 
includes the identifying information uniquely identifying an officer of the corporation and 
wherein the authority of the officer is stored by the financial services provider. 

1 5. (Original) The system of Claim 14, wherein the requiring step includes steps of: 
receiving the primary certificate from the primary certificate holder or one of the 

secondary certificates from one of the secondary certificate holders; 
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authenticating an identity of the certificate holder from which the certificate was 
received, and 

validating the presented certificate. 

16. (Original) The system of Claim 12, wherein the primary digital certificate 
includes the authority of an officer of the corporation and wherein the identifying information 
uniquely identifying the officer is stored by the financial services provider. 

17. (Original) The system of Claim 12, wherein the indication of authority 
includes at least one of: a maximum payment that the holder of the certificate is authorized to 
validate, an expiration date of the certificate, payees for which the certificate holder is authorized 
to validate payments. 

1 8. (Original) The system of Claim 1 2, further comprising the step of receiving a 
list of validated corporate payment requests from an authenticated certificate holder of the 
corporation and clearing only those corporate payment requests against the corporate account 
that are listed in the received list of validated corporate payment requests. 

19. (Original) The system of Claim 12, wherein the requiring step includes a step 
of validating the collected pending payment requests of the pending payment statement at least 
partially programmatically. 

20. (Original) The system of Claim 12, wherein the requiring step validates each 
pending payment requests in the pending payment statement by matching the payment request 
with a corresponding payment request in an accounting system of the corporation. 
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21. (Original) The system of Claim 20, wherein access to the accounting system of 
the corporation is by presentment of the primaiy certificate or one of the secondary certificates. 

22. (Original) The system of Claim 12, wherein the pending payment statement 
generating step generates the pending payment statement at a regular interval. 

23. (Original) The system of Claim 12, wherein the regular interval is one of daily 
and weekly. 

24. (Currently Amended) A machine-readable medium having data stored thereon 
representing sequences of instructions which, when executed by computing device, causes said 
computing device to enable a financial services provider to securely process corporate payment 
requests over the computer network by performing the steps of: 

issuing a primary certificate to a primary certificate holder of a corporation, the primary 
certificate being con figured to authorize authorizin g the primary certificate holder to 
designate a plurality of holders of secondary digital certificates that are derivative from the 
primaiy digital certificate, each of the primary and plurality of secondary certificates including at 
least one of unique identifying information and an indication of authority of the holder of the 
certificate , an authority defined in each of the secondary digital certificates being 
comparatively more limited than an antho ritv defined in the primary digital certificate: 

collecting, over the computer network, pending corporate payment requests for clearing 
against an account of the corporation; 

periodically generating a pending payment statement that includes the collected pending 
payment requests; 
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requiring that each of the collected pending payment requests be validated by an 
authenticated primary or secondary certificate holder having the authority to validate the 
payment requests, and 

clearing only validated corporate payment requests of the pending payment statement 
against the corporate account. 

25. (Original) The medium of Claim 24, wherein the primary digital certificate 
includes both an identifying information uniquely identifying an officer of the corporation and 
the authority of the officer. 

26. (Original) The medium of Claim 24, wherein the primary digital certificate 
includes the identifying information uniquely identifying an officer of the corporation and 
wherein the authority of the officer is stored by the financial services provider. 

27. (Original) The medium of Claim 26, wherein the requiring step includes steps of: 
receiving the primary certificate from the primary certificate holder or one of the 

secondary certificates from one of the secondary certificate holders; 

authenticating an identity of the certificate holder from which the certificate was 
received, and 

validating the presented certificate. 

28. (Original) The medium of Claim 24, wherein the primary digital certificate 
includes the authority of an officer of the corporation and wherein the identifying information 
uniquely identifying the officer is stored by the financial services provider. 
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29. (Original) The medium of Claim 24, wherein the indication of authority includes 
at least one of: a maximum payment that the holder of the certificate is authorized to validate, an 
expiration date of the certificate, payees for which the certificate holder is authorized to validate 
payments. 

30. (Original) The medium of Claim 24, further comprising the step of receiving a 
list of validated corporate payment requests from an authenticated certificate holder of the 
corporation and clearing only those corporate payment requests against the corporate account 
that are listed in the received list of validated corporate payment requests. 

3 1 . (Original) The medium of Claim 24, wherein the requiring step includes a step of 
validating the collected pending payment requests of the pending payment statement at least 
partially programmatically. 

32. (Original) The medium of Claim 24, wherein the requiring step validates each 
pending payment requests in the pending payment statement by matching the payment request 
with a corresponding payment request in an accounting system of the corporation. 

33. (Original) The medium of Claim 32, wherein access to the accounting system of 
the corporation is by presentment of the primary certificate or one of the secondary certificates. 

34. (Original) The medium of Claim 24, wherein the pending payment statement 
generating step generates the pending payment statement at a regular interval. 

35. (Original) The medium of Claim 24, wherein the regular interval is one of daily 
and weekly. 
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36. (Withdrawn) A method for securing payments of a corporation, comprising the 
steps of: 

receiving a primary certificate from a financial services provider (FSP); 

assigning the primary certificate to a primary certificate holder of the corporation, the 
primary certificate authorizing the primary certificate holder to designate a plurality of holders of 
secondary digital certificates that are derivative from the primary digital certificate, each of the 
primary and plurality of secondary certificates including at least one of unique identifying 
infonnation and an indication of an authority of the holder of the certificate; 

periodically accessing a pending payment statement generated by the FSP upon 
presentation of the primary or one of the secondary certificates and successful authentication by 
the FSP, the pending payment statement including at least one pending payment request of the 
corporation collected by the FSP; 

matching each of the at least one pending corporate payment requests against a record of 
a corresponding entry in an accounting system of the corporation; 

validating only those corporate payment requests having corresponding entries in the 
accounting system, a validation of each collected pending payment request by an authenticated 
certificate holder being a condition precedent to the payment request clearing an account of the 
corporation at the FSP. 

37. (Withdrawn) The method of Claim 36, wherein access to the accounting system 
of the corporation is by presentment of the primary certificate or one of the secondary 
certificates. 
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38. (Withdrawn) The method of Claim 36, wherein the periodic accessing step is 
carried out every day. 

39. (Withdrawn) The method of Claim 36, wherein the periodic accessing step 
includes a step of logging onto a Web site of die FSP. 

40. (Withdrawn) The method of Claim 36, wherein the periodic accessing step 
includes a step of receiving and opening an electronic Hie sent by the FSP, the electronic file 
including the pending payment statement generated by the FSP. 

41. (Withdrawn) The method of Claim 36, wherein each certificate holder is limited 
to validating only those pending payment requests that are within a scope of the authority 
indicated in the certificate. 

42. (Withdrawn) The method of Claim 36, further including a step of changing a 
scope of the authority of a certificate holder upon changing a status of the holder within the 
corporation. 

43. (Withdrawn) The method of Claim 42, wherein changing the scope of authority 
of a certificate holder includes a step of revoking the certificate of the holder. 

44. (Withdrawn) The method of Claim 43, further including a step of issuing a new 
secondary certificate to the holder of the revoked certificate, the new secondary certificate 
including an indication of the changed authority. 

45. (Withdrawn) The method of Claim 36, wherein the indication of authority 
includes at least one of: a maximum payment that the holder of the certificate is authorized to 
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validate, an expiration date of the certificate, payees for which the certificate holder is authorized 
to validate payments. 

46. (Withdrawn) A computer system configured for securing payments of a 
corporation, comprising: 

at least one processor; 

at least one data storage device; 

a plurality of processes spawned by said at least one processor, the processes including 
processing logic for: 

receiving a primary certificate from a financial services provider (FSP); 

assigning the primary certificate to a primary certificate holder of the corporation, the 
primary certificate authorizing the primary certificate holder to designate a plurality of holders of 
secondary digital certificates that are derivative from the primary digital certificate, each of the 
primary and plurality of secondary certificates including at least one of unique identifying 
information and an indication of an authority of the holder of the certificate; 

periodically accessing a pending payment statement generated by the FSP upon 
presentation of the primary or one of the secondary certificates and successful authentication by 
the FSP, the pending payment statement including at least one pending payment request of the 
corporation collected by the FSP; 

matching each of the at least one pending corporate payment requests against a record of 
a corresponding entry in an accounting system of the corporation; 

validating only those corporate payment requests having corresponding entries in the 
accounting system, a validation of each collected pending payment request by an authenticated 
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certificate holder being a condition precedent to clearing an account of the corporation at the 
FSP. 

47. (Withdrawn) The computer system of Claim 46, wherein access to the 
accounting system of the corporation is by presentment of the primary certificate or one of the 
secondary certificates* 

48. (Withdrawn) The computer system of Claim 46, wherein the periodic accessing 
step is carried out every day. 

49. (Withdrawn) The computer system of Claim 46, wherein the periodic accessing 
step includes a step of logging onto a Web site of the FSP. 

50. (Withdrawn) The computer system of Claim 46, wherein the periodic accessing 
step includes a step of receiving and opening an electronic file sent by the FSP, the electronic file 
including the pending payment statement generated by the FSP. 

5 1 . (Withdrawn) The computer system of Claim 46, wherein each certificate holder 
is limited to validating only those pending payment requests that are within a scope of the 
authority indicated in the certificate. 

52. (Withdrawn) The computer system of Claim 46, further including a step of 
changing a scope of the authority of a certificate holder upon changing a status of the holder 
within the corporation. 

53. (Withdrawn) The computer system of Claim 52, wherein changing the scope of 
authority of a certificate holder includes a step of revoking the certificate of the holder. 

13 

Serial No. 10/071,363 

U1D-200 1-195-01 Atty. Docket No. ORCL5775 

PAGE 13/22 4 RCVD AT 4/25/2005 7:55:19 PM [Eastern Daylight Time] * SVR:USPT0-EFXRF-1/7 * DNIS:8729306 * CSID:6508517232 * DURATION (mm-ss):0M2 



84/25/2085 16:45 6508517232 



YOUNG LAW FIRM PC 



PAGE 14 



54. (Withdrawn) The computer system of Claim 53, further including a step of 
issuing a new secondary certificate to the holder of the revoked certificate, the new secondary 
certificate including an indication of the changed authority. 

55. (Withdrawn) The computer system of Claim 46, wherein the indication of 
authority includes at least one of: a maximum payment that the holder of the certificate is 
authorized to validate, an expiration date of the certificate, payees for which the certificate 
holder is authorized to validate payments. 

56. (Withdrawn) A machine-readable medium having data stored thereon 
representing sequences of instructions which, when executed by computing device, causes said 
computing device to secure payments of a corporation by performing the steps of: 

receiving a primary certificate from a financial services provider (FSP); 

assigning the primary certificate to a primary certificate holder of the corporation, the 
primary certificate authorizing the primary certificate holder to designate a plurality of holders of 
secondary digital certificates that are derivative from the primary digital certificate, each of the 
primary and plurality of secondary certificates including at least one of unique identifying 
information and an indication of an authority of the holder of the certificate; 

periodically accessing a pending payment statement generated by the FSP upon 
presentation of the primary or one of the secondary certificates and successful authentication by 
the FSP, the pending payment statement including at least one pending payment request of the 
corporation collected by the FSP; 

matching each of the at least one pending corporate payment requests against a record of 
a corresponding entry in an accounting system of the corporation; 
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validating only those corporate payment requests having corresponding entries in the 
accounting system, a validation of each collected pending payment request by an authenticated 
certificate holder being a condition precedent to clearing an account of the corporation at the 
FSP. 

57. (Withdrawn) The medium of Claim 56, wherein access to the accounting system 
of the corporation is by presentment of the primary certificate or one of the secondary 
certificates. 

58. (Withdrawn) The medium of Claim 56, wherein the periodic accessing step is 
carried out every day. 

59. (Withdrawn) The medium of Claim 56, wherein the periodic accessing step 
includes a step of logging onto a Web site of the FSP. 

60. (Withdrawn) The medium of Claim 56, wherein the periodic accessing step 
includes a step of receiving and opening an electronic file sent by the FSP, the electronic file 
including the pending payment statement generated by the FSP. 

61 . (Withdrawn) The medium of Claim 56, wherein each certificate holder is limited 
to validating only those pending payment requests that are within a scope of the authority 
indicated in the certificate. 

62. (Withdrawn) The medium of Claim 56, further including a step of changing a 
scope of the authority of a certificate holder upon changing a status of the holder within the 
corporation. 
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63. (Withdrawn) The medium of Claim 62, wherein changing the scope of authority 
of a certificate holder includes a step of revoking the certificate of the holder. 

64. (Withdrawn) The medium of Claim 63, further including a step of issuing a new 
secondary certificate to the holder of the revoked certificate, the new secondary certificate 
including an indication of the changed authority, 

65. (Withdrawn) The medium of Claim 56, wherein the indication of authority 
includes at least one of: a maximum payment that the holder of the certificate is authorized to 
validate, an expiration date of the certificate, payees for which the certificate holder is authorized 
to validate payments. 
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